added hashing to passwords stored in db